Independent FedRAMP-cost research, read by teams pricing authorization. Not affiliated with GSA or the FedRAMP PMO.Sponsor this site →
DOC-REF: FRC-2026-04-28Rev 04 / 2026

Section 8.4 - Register entry

DOC-REF: FRC-MKT-F1206111371

Knox Systems

Knox Systems, Inc. lists Knox Systems on the FedRAMP Marketplace with the status FedRAMP Certified, at Moderate impact, on the Agency path under the Rev5 process. Package F1206111371, read from the marketplace feed as of September 28, 2026.

FedRAMP CertifiedRev5Agency path

Section A. Register entry

What the marketplace records

FedRAMP package ID
F1206111371
Cloud service provider
Knox Systems, Inc.
Certification status
FedRAMP Certified
Impact level
Moderate
Certification class
Class C (Moderate)
Authorization path
Agency
Certification type
Rev5
Marketplace phase
Ongoing Certification
Deployment model
Government Community Cloud
Register snapshot
September 28, 2026
Service model
SaaS
Independent assessor
Coalfire Systems, Inc.
Sponsoring agency
Food and Drug Administration
Certification date
June 21, 2017
Status date
June 21, 2017
Annual assessment
April 19, 2011
Agency authorizations
6
Recorded reuses
5
Business categories
Analytics, Collaboration, Communication, Content Management System (CMS), Cybersecurity & Risk Management, Development Tools, Education & Training, Learning Management, Operations Management, System Administration
SAM.gov UEI
NMSFSAMF88Z3
Milestones on record
3

The marketplace carries Knox Systems under package F1206111371 with 21 recorded fields. Its certification date is June 21, 2017. Coalfire Systems, Inc. is named as the independent assessor, with an annual assessment date of April 19, 2011. Food and Drug Administration is recorded as the sponsoring agency. 6 agencies are listed as having authorized it, among them Administration for Children & Families, Defense Information Systems Agency, Federal Law Enforcement Training Centers and 3 more, and the feed records 5 reuses of the package. It is delivered as SaaS on a government community cloud, filed under 10 business categories including Analytics, Collaboration, Communication and 7 more. Its SAM.gov unique entity identifier is NMSFSAMF88Z3.

Section B. Milestones

3 entries in the marketplace event log

Most recent first, as recorded by FedRAMP.

Event log
DateCategoryRecorded
June 21, 2017Status ChangeStatus changed from PMO Review to FedRAMP Certified
July 29, 2015Status ChangeStatus changed from Agency Review to FedRAMP In Process
September 12, 2012Status ChangeStatus set to Agency Authorization In Process

Section C. Cost context

What reaching Moderate costs

Our own published ranges for a provider going through this level. Nothing here is a figure this provider has disclosed.

Cost context

Budget for a Moderate authorization

Initial authorization$800,000 to $2,000,000
Continuous monitoring$150,000 to $350,000 a year
Typical timeline12 to 18 months
Control baseline325+ controls
Annual assessment$90,000 to $260,000 a year

Our published planning range for a provider pursuing Moderate. It is not a figure any listed provider has disclosed.

Read the FedRAMP Moderate cost guide / annual assessment cost / continuous monitoring cost

Path

Agency Authorization is the route for 572 of the offerings on the marketplace. Our cost pages put it at $800,000 to $2,000,000 over 12 to 18 months for Moderate. Agency authorization cost

Assessment and monitoring

An annual assessment date of April 19, 2011 is on the record, and that assessment recurs for as long as the package stays listed. Annual assessment cost / continuous monitoring cost

Section D. Services in scope

22 services listed inside the assessment boundary

Section E. Agencies on the record

6 agencies listed against this package

As published on the marketplace. An agency named here has issued its own authorization to operate; FedRAMP does not issue ATOs itself.

  • Administration for Children & Families
  • Defense Information Systems Agency
  • Federal Law Enforcement Training Centers
  • Food and Drug Administration
  • Internal Revenue Service
  • United States Patent and Trademark Office

Section G. Nearest entries on the register

Comparable offerings

Scored on impact level, path, status, shared business categories and how close the two entries sit in the register's own timeline.

Knox Systems, Inc. lists 2 offerings on the marketplace. The others are:

Knox Systems FedRAMP High Managed Platform High

Section H. Description

As published on the marketplace

The provider's own description of the service, reproduced from the FedRAMP feed without edits.

Knox Systems provides a multi-tenant cloud platform for delivering commercial software to federal government customers. Customer applications deploy on Knox's managed infrastructure across AWS, Azure, and Google Cloud Platform using Kubernetes containers, serverless functions, or virtual machines. Knox provides 24/7 Security Operations Center and Network Operations Center management, continuous security monitoring, vulnerability scanning, patch management, and incident response for all customer workloads. This includes: Adobe Connect is designed for immersive synchronous online meeting experiences for training, large-scale webinars, and virtual classroom meetings for a distributed workforce. Adobe Learning Manager (ALM) is an asynchronous Learning Management System that enables Learning and Development teams to drive personalized learning experiences across multiple devices. Class Technologies Inc. (class.com) is the next generation virtual learning environment that enables active learning, collaboration, and engagement in online classes and virtual instructor-led training. Spacelift delivers a FedRAMP-compliant IaC automation platform for secure and efficient cloud infrastructure management. It streamlines OpenTofu, Terraform, Pulumi, and Kubernetes workflows with robust policy enforcement and secret management for government agencies. Tovuti LMS and Tovuti Waypoints: Best of Class Compliance Training and AI Course Authoring in Minutes not Months - Tovuti LMS is a FedRAMP Moderate authorized platform built for federal agencies, delivering secure learner management, automated compliance tracking, role-based access controls, and real-time reporting across your workforce. For AI course authoring, Tovuti Waypoints converts your agency's source materials into interactive, Section 508-compliant SCORM courses. Instantly transform policy PDFs and procedures into ready-to-deploy training, accelerating your response to new mandates with a platform built for both speed and security. Celonis Process Mining (CPM4) is the world's leading data-driven process optimization platform that helps organizations automatically discover inefficiencies, ensure compliance, and identify improvement opportunities across business processes through real-time analytics and visualization. Backupta is a Resilience Platform for Okta that ensures uninterrupted identity and access management. It delivers secure backup, disaster recovery, and rapid restoration of tenants or objects. Tenant cloning and failover strengthen business continuity, while proactive monitoring and audit logs enhance security. Kovr.AI accelerates compliance authorizations (FedRAMP, CMMC, DOD SRG) from months to minutes by automating gap assessments and ATO package generation, instantly identifying compliant controls and remediation needs, then auto-generating required authorization documentation including SSPs, POA&Ms, and policies. The platform connects to environments via read-only integrations-or accepts direct evidence uploads-enabling teams to rapidly and continuously monitor and assess their security configurations, logs, policies, evidence, and artifacts using state-of-the-art Large Language Models (LLMs). OutSystems enables federal agencies to rapidly build, manage, and scale mission-critical digital solutions with government-grade security, reliability, and governance built in. The platform supports the entire software development lifecycle, including integrated DevSecOps capabilities, enabling teams to deliver better frontline digital services and modernize core mission systems significantly faster. Agencies can accelerate delivery without extensive re-skilling, expanding development teams, or taking on the risks and costs associated with vendor lock-in. Armis APEX Manage provides federal administrators a "single pane of glass" to aggregate operational data across multi-tenant Armis Centrix deployments. It eliminates manual per-tenant logins by centralizing health metrics and consolidated reporting into a unified oversight interface. Resilinc Supply Chain Risk and Compliance Platform - Resilinc provides federal agencies with enterprise-level visibility and risk management across multi-tier supplier networks. The platform utilizes AI-driven workflows to automate disruption monitoring, forced labor compliance assessments (including UFLPA), and trade impact analysis. This SaaS solution streamlines oversight, allowing organizations to proactively identify and mitigate vulnerabilities within the global supply chain. BigID provides an automated foundation for data security, privacy, and governance across the federal enterprise. The platform proactively discovers, architectures, and inventories sensitive data and AI assets across all environments-including multi-cloud, on-premises data centers, and data pipelines. By utilizing advanced machine learning for deep data classification, BigID enables agencies to automatically identify PII, PHI, and CUI. This visibility allows organizations to mitigate risk, enforce granular access controls, and ensure regulatory compliance. From automating data lifecycle management to securing the data fed into AI models, BigID transforms fragmented information into a secure, searchable, and compliant asset. Procurement Sciences offers a secure, end-to-end AI platform purpose-built for government contractors to find, qualify, manage, and win federal and SLED opportunities. The Awarded AI platform uses advanced generative and agentic AI to identify and surface relevant opportunities, evaluate bid/no-bid fit, manage capture and pipeline activities, extract and shred requirements, generate structured proposal outlines and first drafts, and automate compliance review and quality checks prior to submission. With human-in-the-loop oversight embedded across AI-powered workflows, the platform accelerates response timelines, strengthens compliance accuracy, improves proposal quality, and drives revenue growth without compromising security. Presage Technologies delivers a contactless physiological and behavioral assessment platform leveraging advanced video-based capture and analysis across in-person and fully remote environments. The platform identifies physiological signals and micromovements from video input, surfacing actionable response patterns and real-time indicators through an intuitive interface that empowers expert analysts to observe, annotate, and interpret findings with speed and confidence. Purpose-built for federal agencies and authorized mission partners, the system supports a broad range of high-value use cases and decision-making workflows requiring non-contact assessment at scale. Brightfin is a ServiceNow-native telecom and IT financial management application that consolidates enterprise wireless, wireline, and cloud spend into a single platform for invoice processing, cost allocation, asset lifecycle management, and carrier integrations. Brightfin provides finance, IT, and procurement teams with authoritative control over telecom and technology costs directly within their ServiceNow environment. Serval is an AI-native enterprise service management platform that automates employee requests, onboarding/offboarding, just-in-time access, and more. Serval allows IT, Security, HR, and other functions to eliminate repetitive work with AI agents while maintaining enterprise-grade security and governance. GovEagle is a purpose-built software-as-a-service (SaaS) platform that helps U.S. government contractors plan, analyze, draft, and manage responses to federal solicitations, addressing the mission need for faster, higher-quality, and more compliant proposal development. The authorization boundary is a multi-tenant SaaS application hosted in AWS GovCloud (US) with logical isolation between customer tenants, used by contractors' business development, capture, and proposal teams to process business and proposal data that may include Controlled Unclassified Information (CUI). Fieldguide is an AI-native platform transforming how audit, advisory, and assurance work gets done. Purpose-built for regulated environments, Fieldguide brings professionals and agentic AI together to modernize engagement delivery from planning through close, enabling audit and advisory practitioners to deliver higher-quality work, strengthen client experiences, and unlock growth for the decade ahead. ThreatModeler Nexus is a threat modeling platform that ingests architecture artifacts, source code, infrastructure-as-code, and system documentation to build and maintain models of an organization's applications and infrastructure, identify security threats and required controls, and generate audit-ready reports; it exists to give organizations a continuously updated, centralized record of system security design rather than relying on manual, point-in-time assessments. Within the authorization boundary, the system covers the model-building, analysis, and reporting components that process customer-submitted architecture and code artifacts and produce the resulting threat/control/compliance data; it is delivered as a single, dedicated-tenant SaaS application meaning each customer has its own isolated instance with system mapping, graph management, and reporting functioning as the major internal components. Users include security architects, developers, and security/compliance leaders at customer organizations, who submit system data (architecture diagrams, code, infrastructure configurations, and related business/technical metadata not typically PII beyond user account information) and consume the resulting risk and compliance outputs; the system depends on customer-provided source repositories and documentation as external inputs to build its models. AidFinder is a Software as a Service (SaaS) platform that helps disaster survivors identify, apply for, and track federal and state emergency assistance programs, primarily FEMA Individual Assistance. The system supports both preparedness and disaster response workflows: before a disaster, it analyzes property-level insurance coverage gaps across six hazard categories - flood, fire, wind, earthquake, snow/ice, and volcano - to help users understand their financial exposure relative to rebuild cost; after a disaster declaration, it evaluates survivor household profiles against program-specific eligibility rules using factors including property ownership, occupancy status, damage severity, insurance coverage, household composition, and income, then orchestrates AI-driven agents that automate end-to-end application submission on the survivor's behalf directly on DisasterAssistance.gov. The platform is delivered as a cloud-native, multi-tenant SaaS application used by disaster survivors and program administrators, and processes Tier 1/2 PII including names, addresses, Social Security data, financial records, property records, and damage documentation. Key external dependencies include FEMA's DisasterAssistance.gov for application submission, Socure for identity verification, Plaid for bank account linking, Mapbox for geospatial disaster visualization. Solve Intelligence is a single-tenant SaaS system for authorized examiners, attorneys, technical specialists, reviewers, supervisors, and administrators who perform government patent work. The system supports examination, legal analysis, document review, research, and drafting, and processes patent records, prior art, business data, CUI, and PII. The authorization boundary contains the web application, workflow, AI, search, and storage services, with dependencies on cloud hosting, identity services, and approved information sources. Sweetspot is a cloud-based, multi-tenant AI platform that enables federal agencies, government contractors, and enterprises to configure, run, and manage complex workflows using their data, institutional knowledge, people, and connected systems. For government contractors, Sweetspot automates work across the business development and bid lifecycle, including opportunity discovery, federal market research, teaming, pipeline and capture management, compliance and capability matrix development, and proposal drafting, with configurable human review and approval steps. Native Microsoft 365 integrations support workflow execution and collaboration across Outlook, Teams, SharePoint, Word, PowerPoint, and Excel.

Next step

What the same authorization would cost you

The worksheet turns an impact level, an existing security posture and an organization size into a line-by-line budget, with the 3PAO fee split out.

Open the Cost Worksheet →More FedRAMP Certified offerings

Provenance and independence

Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 28, 2026; this copy was taken on October 3, 2026.

GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.

FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.

DOC-REF: FRC-2026-04-28 / Updated 2026-04-28